Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: Qq6oIBuDtkJjR8GCzUBnIwr3v8nqD7NplmcuzFiS6nE=
Subject key identifier: 77:DD:6B:AB:86:3F:3E:2D:4A:68:6E:AE:03:04:FD:94:EF:23:97:2A
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019963C7659FD465589F87B5BF60DB5B5D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 1694
Signing time: Fri 19 Sep 2025 21:00:36 +0000
Manifest this update: Fri 19 Sep 2025 21:00:36 +0000
Manifest next update: Sat 20 Sep 2025 21:00:36 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: 9LVQT1l5/fZLo6ZvCukYx+JCzC9DSr8fPrOyeNOr6y4=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:c7:65:9f:d4:65:58:9f:87:b5:bf:60:db:5b:5d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Sep 19 21:00:36 2025 GMT
Not After : Sep 20 21:00:36 2025 GMT
Subject: CN=77dd6bab863f3e2d4a686eae0304fd94ef23972a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:66:af:07:e4:1c:d2:d2:76:4f:d8:8f:3b:
ba:20:32:0c:90:6d:67:71:66:43:ae:7f:73:f4:0f:
d9:cb:b1:76:6c:6e:5f:53:ff:bf:e0:48:79:c1:b0:
bc:70:92:fb:52:e8:59:2a:06:74:05:e8:52:2e:a7:
ee:68:20:4c:82:ec:bb:55:56:5f:54:c3:3f:39:cf:
cf:7e:85:26:ff:2a:4d:e9:86:45:0f:d2:f4:cd:7c:
8a:b7:0b:9b:c9:91:72:c8:eb:09:a2:db:0a:7b:00:
c0:66:97:d5:b9:ac:a9:b8:c0:10:a2:94:0a:a0:56:
a5:82:73:82:7d:95:4c:96:4e:b0:7f:4c:3d:7c:fd:
0e:48:a0:f0:f6:3c:9a:bf:16:79:6e:cc:85:46:42:
5e:d3:a5:58:50:07:9b:7f:3d:47:95:92:5e:5e:e6:
8a:2f:61:16:21:a1:bd:92:d9:dd:f4:74:5d:1c:ca:
9d:0d:4a:8c:42:1f:af:2e:cb:73:e2:c3:46:30:bd:
b4:69:e9:92:76:ad:22:fb:91:ae:ed:41:38:a2:94:
7c:58:e8:ea:bc:45:f2:90:9b:dd:81:dc:f7:e3:d3:
cd:d8:f1:21:3c:bf:b8:6a:6e:54:73:a8:00:62:ae:
2e:3a:dc:83:7a:a9:74:1b:59:4b:d1:80:a9:9e:bb:
b3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DD:6B:AB:86:3F:3E:2D:4A:68:6E:AE:03:04:FD:94:EF:23:97:2A
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:12:b0:10:45:f9:90:c4:59:a6:b5:24:11:9d:c8:fd:4e:50:
7f:4d:8a:3d:26:a3:60:ec:4e:75:89:87:49:9b:53:2e:eb:46:
f3:c2:0d:85:9a:3c:79:32:4c:68:5a:7c:37:e5:0e:2f:9c:bb:
36:2a:a1:e3:c7:c3:18:2d:c7:b6:59:b1:fa:b2:2c:ab:dc:33:
39:3d:a3:2d:67:dc:a5:89:c3:d9:e3:cf:28:2a:4d:d4:b8:89:
d2:ac:9b:a0:3a:b7:69:aa:bf:32:10:3b:32:05:40:94:2c:d1:
22:b3:81:28:c3:b1:0a:81:e7:6f:ff:f7:0f:49:6c:7b:24:c6:
f4:01:53:26:75:91:b4:5a:6e:84:13:7d:32:9c:65:91:26:e9:
66:29:9e:33:a6:d9:91:f6:0c:58:bf:50:f8:ee:0b:5c:6a:0f:
29:86:fc:b5:50:f6:1a:94:00:a7:cd:bb:f5:99:ae:a5:aa:c0:
40:e0:d6:4c:cb:c2:e2:e8:25:b2:8f:0f:33:e9:e4:85:17:b6:
09:32:5f:5a:8d:f6:86:41:5c:a6:36:b7:ab:d6:97:7f:d3:31:
4f:d3:22:10:81:36:f9:49:3a:37:cf:89:36:92:42:5d:90:67:
7e:c6:79:af:51:80:63:4e:fe:13:de:f8:e5:f4:60:fd:e8:86:
88:d4:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:22:26 2025 by rpki-client